
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/a45363ac-38b7-3765-9fd2-71955777f847.roa
File: a45363ac-38b7-3765-9fd2-71955777f847.roa (raw, json)
Hash identifier: MWMlRRzlg27L+iElWKoc/Cxf6QEOHS3bPamoqEYQcKY=
Subject key identifier: 86:12:74:E3:1C:EF:AA:30:F4:C2:10:58:11:22:DB:AC:5F:DA:C5:3B
Certificate issuer: /CN=3d17c017-30b5-444a-aa30-048cc30971e3
Certificate serial: 010D0C9F4328584E7A64F8C8E0AB58342E496280
Authority key identifier: 6C:B3:35:22:2D:B9:DC:2C:D3:98:62:F1:4D:22:68:34:1A:DC:2B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/a45363ac-38b7-3765-9fd2-71955777f847.roa
Signing time: Sun 12 Jul 2026 21:00:13 +0000
ROA not before: Sun 12 Jul 2026 21:00:13 +0000
ROA not after: Sat 10 Oct 2026 21:00:13 +0000
asID: 401927
IP address blocks: 104.204.192.0/21 maxlen: 21
2604:1d20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:7a:64:f8:c8:e0:ab:58:34:2e:49:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d17c017-30b5-444a-aa30-048cc30971e3
Validity
Not Before: Jul 12 21:00:13 2026 GMT
Not After : Oct 10 21:00:13 2026 GMT
Subject: CN=c767eee4-2115-4f6c-b6ae-227f9af3db3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:02:8e:d4:0e:2c:ed:7d:0c:f2:4e:32:29:23:
e2:46:67:91:75:1d:1e:8b:8c:d4:46:89:8e:22:3a:
63:89:c7:83:d5:4e:91:b2:6e:03:e0:2f:22:69:88:
49:73:40:7d:f4:5e:1e:cc:96:44:38:82:32:86:06:
a0:90:1b:84:66:3a:9b:94:e2:c0:f7:a8:d1:76:1c:
22:74:54:bb:23:d0:69:60:bb:e4:e5:34:71:96:f6:
ae:7c:05:72:0a:0a:fc:fc:58:f1:a3:d6:83:5a:85:
f7:44:dc:4b:11:65:7b:08:d4:b4:2d:5a:79:a6:09:
b7:e1:07:06:ca:a7:13:08:57:80:5f:7d:0c:61:d3:
96:77:02:aa:ab:c0:c6:cf:02:39:c7:48:ac:87:b1:
05:fd:7c:c8:41:11:ba:0c:17:4d:11:c4:0f:de:07:
3f:20:ba:f3:5c:49:a6:03:29:36:18:cf:d0:c6:8b:
70:36:75:39:33:9f:b6:97:91:f0:0c:19:d2:7c:cd:
31:d0:4c:49:83:6d:05:5b:e2:1a:ec:37:18:86:ed:
1f:4b:e3:00:18:22:ef:9f:3f:02:f1:b3:c3:02:58:
71:d7:67:3c:db:7c:9e:48:47:2f:74:4c:bf:99:38:
7e:db:40:55:ab:83:33:7f:3a:61:fb:89:27:cc:27:
50:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:12:74:E3:1C:EF:AA:30:F4:C2:10:58:11:22:DB:AC:5F:DA:C5:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/a45363ac-38b7-3765-9fd2-71955777f847.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.crl
X509v3 Authority Key Identifier:
keyid:6C:B3:35:22:2D:B9:DC:2C:D3:98:62:F1:4D:22:68:34:1A:DC:2B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3.cer
sbgp-ipAddrBlock: critical
IPv4:
104.204.192.0/21
IPv6:
2604:1d20::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:bd:f4:8b:1e:f2:10:1d:2c:cd:0b:b2:20:56:50:13:3f:96:
86:66:2e:a0:6b:80:14:c4:9b:b3:72:76:71:1f:3b:06:b6:a4:
c3:45:07:12:20:c1:7c:fb:1d:6a:e3:7b:11:29:ba:35:31:cf:
41:cf:da:be:60:c0:80:6f:b1:5d:48:a4:c2:0e:0d:e6:0a:a9:
3d:19:83:98:c9:42:0a:3f:fe:a4:bd:50:16:57:70:77:28:ee:
51:98:2e:98:bb:ee:fd:52:49:e7:ba:12:6d:7b:3f:da:6a:be:
01:89:60:24:5b:f3:38:5a:e7:a7:9b:d2:bd:97:2e:54:68:43:
0b:13:ff:8d:26:5f:4f:a8:b2:03:8e:e0:d8:96:a7:1a:d6:e1:
77:d3:70:ad:bf:60:2a:10:e2:06:47:ae:f4:7a:84:e8:ad:ab:
4a:69:4c:4d:37:c1:75:5e:38:f2:3a:f2:d9:0b:b8:62:6f:6a:
47:22:9f:f2:3f:32:f7:32:d9:91:e2:2a:c2:95:e2:0f:30:8a:
74:70:df:62:44:d6:e8:eb:2e:e3:36:be:93:cb:b1:65:9f:f6:
f8:e4:4f:9e:cb:33:ac:4a:e6:04:77:18:4c:65:d0:d0:70:80:
36:7f:0b:74:49:16:aa:66:3b:63:48:f2:30:81:53:26:9b:91:
88:65:0f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:54:21 2026 by rpki-client